The vulnerability of the OLE Automatization component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE Automatization component of the Windows operating system is related to a memory object handling error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Windows Graphics Device Interface component of the Windows operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Windows Graphics Device Interface GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to compromise the confidentiality of protected information through a specially created...

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode

The vulnerability of the Win32k component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

The vulnerability of the DirectX component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectX component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Windows Zero-Day Emerges in Active Exploits

A just-patched vulnerability in the Windows operating system that was previously unknown up until last week is being actively exploited in the wild; it opens the door for full system takeover. Discovered by Vasily Berdnikov and Boris Larin of Kaspersky Lab on St. Patrick’s Day this year, the flaw...

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16752)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Internet Explorer VBScript Engine. An attacker could exploit this vulnerability to execute arbitrary code in...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege-lifting vulnerability exists in Microsoft Windows that stems from Windows'...

PT-2019-1846 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the Win32k component of the Windows operating system. This can allow a remote attacker to elevate their...

DEBIAN-CVE-2018-4345

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

The vulnerability of the Microsoft XML Core Services MSXML on the Windows operating system allows a hacker to execute malicious code and gain control over the system.

The vulnerability of the Microsoft XML Core Services MSXML in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute malicious code remotely and gain control over the system...

The vulnerability of the comctl32.dll file in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the comctl32.dll file in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VBScript mechanism in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the VBScript mechanism in the Windows operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability of the Active Directory Forest catalog service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Active Directory catalog service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Microsoft XML Core Services on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft XML Core Services on the Windows operating system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote...

CVE-2018-12218

Unhandled exception in User Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables an unprivileged user to cause a memory lea...

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way memory objects are handled in the VBScript Engine of...

Microsoft Internet Explorer VBScript Engine Remote Memory Corruption Vulnerability (CNVD-2019-10618)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote memory corruption vulnerability exists in the way memory objects are handled in the VBScript Engine o...

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16754)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Graphics Device Interface GDI is one of the graphics device...